Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fyUUu7r1wpj50DsRdom7I-xn_5A.roa
File: fyUUu7r1wpj50DsRdom7I-xn_5A.roa (raw, json)
Hash identifier: VJ8UUGR2RsBStFOQ/oKlHE/h2uFqof+gLCyFvF3wlEM=
Subject key identifier: 7F:25:14:BB:BA:F5:C2:98:F9:D0:3B:11:76:89:BB:23:EC:67:FF:90
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0190B81E573943FFD53D75A24FF6F7B8146C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fyUUu7r1wpj50DsRdom7I-xn_5A.roa
Signing time: Mon 15 Jul 2024 20:38:34 +0000
ROA not before: Mon 15 Jul 2024 20:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b8:1e:57:39:43:ff:d5:3d:75:a2:4f:f6:f7:b8:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 15 20:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f2514bbbaf5c298f9d03b117689bb23ec67ff90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:c8:08:69:54:40:ff:81:12:9e:f2:ed:58:
b3:08:fb:c2:ee:2d:9c:bb:8a:66:72:27:94:b4:ac:
66:f2:ab:85:37:e2:09:be:1d:2a:96:38:d4:2f:45:
31:4a:ab:b5:be:b5:13:b3:94:7e:a8:6d:0b:e2:a6:
9d:53:a7:89:63:5a:26:e0:32:03:2a:19:df:64:b5:
7c:0a:1a:32:5c:48:7c:98:b0:c3:d4:ab:ed:19:e9:
8d:75:35:52:60:51:32:91:46:a1:0b:ce:67:d8:3c:
af:2e:4d:34:a6:b1:ef:0f:13:52:92:3e:0c:50:63:
dd:93:45:95:a1:9c:b4:21:1d:9e:e3:e1:1e:10:e1:
12:d5:82:54:87:1e:49:e1:b1:cd:80:0f:de:69:57:
59:4e:a2:25:c7:5e:62:a4:22:63:15:af:2e:89:05:
37:ad:b8:1a:3d:ec:6e:e7:f6:11:f8:8f:b2:d8:d9:
b0:f5:cc:c8:7f:32:90:7e:83:37:54:3c:db:6b:f2:
e1:91:f0:64:78:b3:8f:e5:ae:7c:05:34:59:c0:06:
ea:55:50:02:7b:56:38:9f:91:27:d9:8a:f1:ca:71:
cd:5e:f5:8d:e2:6a:cb:2e:a5:02:78:00:48:bf:01:
5a:47:82:b5:82:ee:ed:34:30:19:e4:80:ba:56:2e:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:14:BB:BA:F5:C2:98:F9:D0:3B:11:76:89:BB:23:EC:67:FF:90
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fyUUu7r1wpj50DsRdom7I-xn_5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.10.0/24
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
62.217.129.0-62.217.131.255
62.217.134.0/24
62.217.138.0/24
62.217.140.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0/24
62.217.156.0/22
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
64:86:72:79:9b:53:78:41:71:19:b2:5a:f2:77:4b:ff:bd:5c:
47:36:ee:3a:7f:77:88:14:da:6c:1a:ae:7b:52:ff:6a:74:a9:
09:18:02:90:f0:aa:19:2d:6c:12:f8:1b:e3:87:f9:a9:8d:45:
9e:a8:d6:da:5d:94:72:74:c1:d8:e0:81:82:1c:38:51:73:e2:
ed:86:8d:c1:2a:87:8c:01:13:41:4c:8d:e5:f7:d6:1b:92:91:
bd:05:3c:15:93:bb:27:f0:b2:8a:44:c6:39:b1:de:7a:e6:c0:
4d:6f:fc:60:da:a2:65:73:c6:81:69:41:e8:82:a1:80:eb:54:
b4:a8:84:14:5f:13:71:67:a1:0c:61:a7:68:15:ce:2f:a3:c4:
c3:24:69:82:fc:59:50:11:46:43:2d:3c:3e:9e:3e:05:da:b8:
1d:6d:0a:7d:cd:66:6d:04:d6:0f:2f:03:93:8b:08:7c:b1:73:
ee:eb:5f:00:b8:f7:22:a0:c3:d2:8c:4c:a0:98:f1:62:3d:19:
a5:54:5b:55:cb:01:f0:ac:90:30:77:3c:33:1f:4b:14:15:95:
4d:2f:f8:95:74:57:ef:a6:09:e4:db:e4:a6:8b:1e:89:6c:2a:
22:0e:37:19:ac:3d:21:db:2f:97:e3:b4:d1:69:65:fd:73:ab:
92:16:f0:77
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZC4Hlc5Q//VPXWiT/b3uBRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQwNzE1MjAzODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjI1MTRiYmJhZjVjMjk4ZjlkMDNiMTE3Njg5YmIyM2VjNjdmZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMHICGlUQP+BEp7y7VizCPvC7i2c
u4pmcieUtKxm8quFN+IJvh0qljjUL0UxSqu1vrUTs5R+qG0L4qadU6eJY1om4DID
KhnfZLV8ChoyXEh8mLDD1KvtGemNdTVSYFEykUahC85n2DyvLk00prHvDxNSkj4M
UGPdk0WVoZy0IR2e4+EeEOES1YJUhx5J4bHNgA/eaVdZTqIlx15ipCJjFa8uiQU3
rbgaPexu5/YR+I+y2Nmw9czIfzKQfoM3VDzba/LhkfBkeLOP5a58BTRZwAbqVVAC
e1Y4n5En2YrxynHNXvWN4mrLLqUCeABIvwFaR4K1gu7tNDAZ5IC6Vi7gjQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFH8lFLu69cKY+dA7EXaJuyPsZ/+QMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvZnlVVXU3cjF3cGo1MERzUmRvbTdJLXhuXzVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQABbIKAwQB
BbIMAwQABbIPAwQCLhdkMAwDBAA+2YEDBAI+2YADBAA+2YYDBAA+2YowDAMEAj7Z
jAMEAD7ZjjAMAwQBPtmSAwQBPtmUAwQAPtmXAwQCPtmcAwQCvEAIMA0GCSqGSIb3
DQEBCwUAA4IBAQBkhnJ5m1N4QXEZslryd0v/vVxHNu46f3eIFNpsGq57Uv9qdKkJ
GAKQ8KoZLWwS+Bvjh/mpjUWeqNbaXZRydMHY4IGCHDhRc+Ltho3BKoeMARNBTI3l
99YbkpG9BTwVk7sn8LKKRMY5sd565sBNb/xg2qJlc8aBaUHogqGA61S0qIQUXxNx
Z6EMYadoFc4vo8TDJGmC/FlQEUZDLTw+nj4F2rgdbQp9zWZtBNYPLwOTiwh8sXPu
618AuPcioMPSjEygmPFiPRmlVFtVywHwrJAwdzwzH0sUFZVNL/iVdFfvpgnk2+Sm
ix6JbCoiDjcZrD0h2y+X47TRaWX9c6uSFvB3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:09 2025 by rpki-client